Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2284
  • Last Modified:

Need site to site vpn help

Hi, I am trying to get a simple vpn tunnel up and running between two sites. One end uses a juniper netscreen firewall and the other end is a pfsense software based firewall. Should these two devices have any trouble talking? I feel like I am 85% complete but am missing some steps. This is my first attempt of a vpn tunnel. If anyone has done this between these two devices and has any input or patience to work with me that would be greatly appreciated.

Thanks!
0
System
Asked:
System
  • 2
2 Solutions
 
SystemAuthor Commented:
Hi,
  It appears my link is actually up but I can't ping between the subnets. Do I have to do routing and so forth to make this happen? I assume by providing the local subnets during the setup that I wouldn't need to touch the routing?

Thanks
0
 
Roachy1979Commented:
You will need to specify the local and remote network address range on both of the devices, so that the gateway on each network knows to push traffic down the VPN tunnel for the rmeote networks rather than just trying to resolve on the www.

See this page here for an explaination of the fields on the pfsense....although I'm not experienced with the juniper, it looks like you've done the hard bit if you've got the connection negotiated :)  It's all downhill from here....

http://doc.pfsense.org/index.php/VPN_Capability_IPSec#Site_to_Site_VPN_Explained
0
 
SysExpertCommented:
ALso note that the tunnel should work OK if  you are not filtering traffic, and both ends are fixed IPs.

If you have one end DHCP, then it is the side that needs to initiate traffic ( ping the other side )


I hope this helps !
0
 
SystemAuthor Commented:
Hi guys,
   Both ends are static IP. I think the problem is with the juniper. It says the VPN link is up but the tunnel interface is down. Not sure how that can be
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now